Privacy-Preserving eID Derivation for Self-Sovereign Identity Systems

Andreas Abraham; Felix Hörandner; Olamide Omolola; Sebastian Ramacher

doi:10.1007/978-3-030-41579-2_18

Privacy-Preserving eID Derivation for Self-Sovereign Identity Systems

Andreas Abraham^*, Felix Hörandner, Olamide Omolola, Sebastian Ramacher

^*Korrespondierende/r Autor/-in für diese Arbeit

Institut für Angewandte Informationsverarbeitung und Kommunikationstechnologie (7050)

Publikation: Beitrag in Buch/Bericht/Konferenzband › Beitrag in einem Konferenzband › Begutachtung

Abstract

As centralized identity management solutions amass identity
data, they increasingly become attractive targets for cyber attacks,
which entail consequences for users that range from service disruptions
to exposure of sensitive user data. Self-sovereign identity (SSI) strives to
return the control over identity data to the users by building on decentralized
architectures. However, the adoption of SSI systems is currently
hampered by a lack of qualified identity data that satisfies the services'
requirements. Additionally, there is a gap w.r.t the user's privacy: Intermediate
components (e.g., importers or SSI network nodes) learn the
users' sensitive attributes during the derivation of eID data.
In this work, we present a decentralized eID derivation concept that
preserves the users' privacy while maintaining the data's trustworthiness
without revealing the plain data to any component outside the users' control.
Our proposed system also enables users to selectively disclose only
relevant parts of the imported identity assertion according to the service's
requirements. We also implement and evaluate a proof-of-concept
to demonstrate the feasibility and performance of our concept.

Originalsprache	englisch
Titel	Information and Communications Security - 21st International Conference, ICICS 2019, Revised Selected Papers
Redakteure/-innen	Jianying Zhou, Xiapu Luo, Qingni Shen, Zhen Xu
Herausgeber (Verlag)	Springer
Seiten	307-323
Seitenumfang	17
Band	11999
ISBN (elektronisch)	978-3-030-41579-2
ISBN (Print)	978-3-030-41578-5
DOIs	https://doi.org/10.1007/978-3-030-41579-2_18
Publikationsstatus	Veröffentlicht - 18 Feb. 2020
Veranstaltung	21st International Conference on Information and Communications Security: ICICS 2019 - Peking, China Dauer: 15 Dez. 2019 → 17 Dez. 2019 http://icics.cn

Publikationsreihe

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Band	11999 LNCS
ISSN (Print)	0302-9743
ISSN (elektronisch)	1611-3349

Konferenz

Konferenz	21st International Conference on Information and Communications Security
Kurztitel	ICICS'19
Land/Gebiet	China
Ort	Peking
Zeitraum	15/12/19 → 17/12/19
Internetadresse	http://icics.cn

ASJC Scopus subject areas

Theoretische Informatik
Informatik (insg.)

Zugriff auf Dokument

10.1007/978-3-030-41579-2_18

Andere Dateien und Links

http://www.scopus.com/inward/record.url?scp=85081174480&partnerID=8YFLogxK

E-Government Innovationszentrum - EGIZ - E-Government Innovationszentrum (EGIZ)
Krnjic, V., Lenz, T., Tauber, A., Posch, R., Abraham, A. & Hörandner, F.
1/09/05 → …
Projekt: Forschungsprojekt

Dieses zitieren

Abraham, A., Hörandner, F., Omolola, O., & Ramacher, S. (2020). Privacy-Preserving eID Derivation for Self-Sovereign Identity Systems. in J. Zhou, X. Luo, Q. Shen, & Z. Xu (Hrsg.), Information and Communications Security - 21st International Conference, ICICS 2019, Revised Selected Papers (Band 11999, S. 307-323). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Band 11999 LNCS). Springer. https://doi.org/10.1007/978-3-030-41579-2_18

Privacy-Preserving eID Derivation for Self-Sovereign Identity Systems. / Abraham, Andreas; Hörandner, Felix; Omolola, Olamide et al.
Information and Communications Security - 21st International Conference, ICICS 2019, Revised Selected Papers. Hrsg. / Jianying Zhou; Xiapu Luo; Qingni Shen; Zhen Xu. Band 11999 Springer, 2020. S. 307-323 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Band 11999 LNCS).

Publikation: Beitrag in Buch/Bericht/Konferenzband › Beitrag in einem Konferenzband › Begutachtung

Abraham, A, Hörandner, F, Omolola, O & Ramacher, S 2020, Privacy-Preserving eID Derivation for Self-Sovereign Identity Systems. in J Zhou, X Luo, Q Shen & Z Xu (Hrsg.), Information and Communications Security - 21st International Conference, ICICS 2019, Revised Selected Papers. Bd. 11999, Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), Bd. 11999 LNCS, Springer, S. 307-323, 21st International Conference on Information and Communications Security, Peking, China, 15/12/19. https://doi.org/10.1007/978-3-030-41579-2_18

Abraham A, Hörandner F, Omolola O, Ramacher S. Privacy-Preserving eID Derivation for Self-Sovereign Identity Systems. in Zhou J, Luo X, Shen Q, Xu Z, Hrsg., Information and Communications Security - 21st International Conference, ICICS 2019, Revised Selected Papers. Band 11999. Springer. 2020. S. 307-323. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-030-41579-2_18

Abraham, Andreas ; Hörandner, Felix ; Omolola, Olamide et al. / Privacy-Preserving eID Derivation for Self-Sovereign Identity Systems. Information and Communications Security - 21st International Conference, ICICS 2019, Revised Selected Papers. Hrsg. / Jianying Zhou ; Xiapu Luo ; Qingni Shen ; Zhen Xu. Band 11999 Springer, 2020. S. 307-323 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{0e0c6fd8b0674d598c8d6356efeff855,

title = "Privacy-Preserving eID Derivation for Self-Sovereign Identity Systems",

abstract = "As centralized identity management solutions amass identitydata, they increasingly become attractive targets for cyber attacks,which entail consequences for users that range from service disruptionsto exposure of sensitive user data. Self-sovereign identity (SSI) strives toreturn the control over identity data to the users by building on decentralizedarchitectures. However, the adoption of SSI systems is currentlyhampered by a lack of qualified identity data that satisfies the services'requirements. Additionally, there is a gap w.r.t the user's privacy: Intermediatecomponents (e.g., importers or SSI network nodes) learn theusers' sensitive attributes during the derivation of eID data.In this work, we present a decentralized eID derivation concept thatpreserves the users' privacy while maintaining the data's trustworthinesswithout revealing the plain data to any component outside the users' control.Our proposed system also enables users to selectively disclose onlyrelevant parts of the imported identity assertion according to the service'srequirements. We also implement and evaluate a proof-of-conceptto demonstrate the feasibility and performance of our concept.",

keywords = "Qualified Electronic Identities, Self-Sovereign Identity, Distributed Ledger, Identity Derivation, Distributed Trust, Privacy, Distributed ledger, Qualified electronic identity, Identity derivation, Distributed trust",

author = "Andreas Abraham and Felix H{\"o}randner and Olamide Omolola and Sebastian Ramacher",

year = "2020",

month = feb,

day = "18",

doi = "10.1007/978-3-030-41579-2_18",

language = "English",

isbn = "978-3-030-41578-5",

volume = "11999",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer",

pages = "307--323",

editor = "Jianying Zhou and Xiapu Luo and Qingni Shen and Zhen Xu",

booktitle = "Information and Communications Security - 21st International Conference, ICICS 2019, Revised Selected Papers",

note = "21st International Conference on Information and Communications Security : ICICS 2019, ICICS'19 ; Conference date: 15-12-2019 Through 17-12-2019",

url = "http://icics.cn",

}

TY - GEN

T1 - Privacy-Preserving eID Derivation for Self-Sovereign Identity Systems

AU - Abraham, Andreas

AU - Hörandner, Felix

AU - Omolola, Olamide

AU - Ramacher, Sebastian

PY - 2020/2/18

Y1 - 2020/2/18

N2 - As centralized identity management solutions amass identitydata, they increasingly become attractive targets for cyber attacks,which entail consequences for users that range from service disruptionsto exposure of sensitive user data. Self-sovereign identity (SSI) strives toreturn the control over identity data to the users by building on decentralizedarchitectures. However, the adoption of SSI systems is currentlyhampered by a lack of qualified identity data that satisfies the services'requirements. Additionally, there is a gap w.r.t the user's privacy: Intermediatecomponents (e.g., importers or SSI network nodes) learn theusers' sensitive attributes during the derivation of eID data.In this work, we present a decentralized eID derivation concept thatpreserves the users' privacy while maintaining the data's trustworthinesswithout revealing the plain data to any component outside the users' control.Our proposed system also enables users to selectively disclose onlyrelevant parts of the imported identity assertion according to the service'srequirements. We also implement and evaluate a proof-of-conceptto demonstrate the feasibility and performance of our concept.

AB - As centralized identity management solutions amass identitydata, they increasingly become attractive targets for cyber attacks,which entail consequences for users that range from service disruptionsto exposure of sensitive user data. Self-sovereign identity (SSI) strives toreturn the control over identity data to the users by building on decentralizedarchitectures. However, the adoption of SSI systems is currentlyhampered by a lack of qualified identity data that satisfies the services'requirements. Additionally, there is a gap w.r.t the user's privacy: Intermediatecomponents (e.g., importers or SSI network nodes) learn theusers' sensitive attributes during the derivation of eID data.In this work, we present a decentralized eID derivation concept thatpreserves the users' privacy while maintaining the data's trustworthinesswithout revealing the plain data to any component outside the users' control.Our proposed system also enables users to selectively disclose onlyrelevant parts of the imported identity assertion according to the service'srequirements. We also implement and evaluate a proof-of-conceptto demonstrate the feasibility and performance of our concept.

KW - Qualified Electronic Identities

KW - Self-Sovereign Identity

KW - Distributed Ledger

KW - Identity Derivation

KW - Distributed Trust

KW - Privacy

KW - Distributed ledger

KW - Qualified electronic identity

KW - Identity derivation

KW - Distributed trust

UR - http://www.scopus.com/inward/record.url?scp=85081174480&partnerID=8YFLogxK

U2 - 10.1007/978-3-030-41579-2_18

DO - 10.1007/978-3-030-41579-2_18

M3 - Conference paper

SN - 978-3-030-41578-5

VL - 11999

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 307

EP - 323

BT - Information and Communications Security - 21st International Conference, ICICS 2019, Revised Selected Papers

A2 - Zhou, Jianying

A2 - Luo, Xiapu

A2 - Shen, Qingni

A2 - Xu, Zhen

PB - Springer

T2 - 21st International Conference on Information and Communications Security

Y2 - 15 December 2019 through 17 December 2019

ER -

Privacy-Preserving eID Derivation for Self-Sovereign Identity Systems

Abstract

Publikationsreihe

Konferenz

ASJC Scopus subject areas

Zugriff auf Dokument

Andere Dateien und Links

Projekte

E-Government Innovationszentrum - EGIZ - E-Government Innovationszentrum (EGIZ)

Dieses zitieren